An undisclosed number of T-Mobile customers may have had personal information compromised after an unauthorized party gained access to a file stored on servers that are owned and managed by a T-Mobile supplier.
How many victims? Undisclosed.
What type of personal information? Names, addresses, Social Security numbers and driver's license numbers.
What happened? An unauthorized party compromised T-Mobile customer data after gaining access to a file that contained the information. The file was stored on servers that are owned and managed by a T-Mobile supplier.
What was the response? The supplier has taken measures to secure the impacted servers. T-Mobile is notifying all impacted customers and is offering them one full year of credit monitoring services and identity theft protection.
Details: T-Mobile learned of the incident on Nov. 26, 2013, according to the California data breach notification website. The incident was reported to the California data breach notification website on Dec. 30, 2013.
Quote: “Although we believe the primary goal of the access was to obtain credit card numbers (which were not included in the file), the information that was accessible could also potentially be misused,” according to the notification letter.
Source: oag.ca.gov, “Customer notice for T-Mobile security incident,” Dec. 30, 2013.
